$ rpki-client -vvf rpkica.twnic.tw/rpki/KE-ING/0/3131392e31342e302e302f31362d3234203d3e2039343136.roa File: 3131392e31342e302e302f31362d3234203d3e2039343136.roa (raw, json) Hash identifier: ogg05JqGwuh8Rk6w6nYH2L3SIwxm+KuAyegtBtcSZ9I= Subject key identifier: 1B:57:60:70:19:EF:45:7A:0D:B1:AD:CF:BC:31:34:93:64:1F:E0:36 Certificate issuer: /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B Certificate serial: 310A4040550C23A19D10D4DF1F552BCC4338014E Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KE-ING/0/3131392e31342e302e302f31362d3234203d3e2039343136.roa Signing time: Mon 11 May 2026 16:45:46 +0000 ROA not before: Mon 11 May 2026 16:40:46 +0000 ROA not after: Mon 10 May 2027 16:45:46 +0000 asID: 9416 IP address blocks: 119.14.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:0a:40:40:55:0c:23:a1:9d:10:d4:df:1f:55:2b:cc:43:38:01:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B Validity Not Before: May 11 16:40:46 2026 GMT Not After : May 10 16:45:46 2027 GMT Subject: CN=1B57607019EF457A0DB1ADCFBC313493641FE036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:25:63:4c:e3:c7:b7:0d:df:d2:c4:46:ae:7e: b4:99:a5:7f:a9:7d:26:ac:00:b2:0e:5c:cb:25:b9: e6:05:e3:68:33:51:13:5d:f3:4f:a5:8f:4d:18:7d: 0a:53:ea:61:58:6f:d1:65:be:09:65:6b:d8:18:45: 67:50:b0:f8:b7:cb:1c:dd:d6:7e:cb:a3:a6:9c:d0: 3a:3b:7e:fd:20:31:7f:7e:69:e0:89:6e:4a:c3:a9: 75:87:30:22:c9:01:a7:7e:8b:45:97:cb:0d:4c:d7: c2:c2:89:d2:2b:4f:ae:f0:bc:6b:d0:75:ae:b7:e4: f8:47:cd:d5:a9:54:e9:b2:08:3e:1d:9c:ba:33:0f: 1a:0c:4d:fb:cb:37:45:ad:45:92:8f:12:fa:93:8d: 9c:f7:38:8b:09:03:71:e7:fb:14:05:85:c4:41:0c: b4:9b:d8:d4:a5:ff:07:f2:e6:5d:ef:bf:2a:c5:05: f6:5b:ee:7f:2e:68:62:d3:8b:cd:9b:a2:05:74:f4: 70:5e:82:9a:75:a0:2d:91:dc:3b:7c:91:25:9e:05: 4e:e4:c1:dd:54:a8:4f:75:18:51:20:74:e2:49:be: fb:0b:4f:07:c1:91:18:55:96:30:a6:b5:fc:b6:dc: 7d:a8:5f:3f:db:56:fd:2e:83:cd:86:f1:fc:5d:3f: aa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:57:60:70:19:EF:45:7A:0D:B1:AD:CF:BC:31:34:93:64:1F:E0:36 X509v3 Authority Key Identifier: keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/3131392e31342e302e302f31362d3234203d3e2039343136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.14.0.0/16 Signature Algorithm: sha256WithRSAEncryption 71:58:f7:ce:f5:dd:31:17:53:a2:61:98:d0:67:c4:d2:d6:9e: 87:65:db:0b:c6:1b:da:93:6e:8b:5f:56:0a:c7:e5:a5:1d:19: 9a:a7:cd:bc:69:62:c2:89:26:91:76:bb:75:29:0c:8b:9f:23: 3f:bd:7f:55:d4:b4:6d:9e:d0:b0:c5:67:b1:11:80:de:0a:b8: 77:62:e8:d4:31:75:02:d6:a1:88:b8:4b:47:27:b9:af:25:f4: 37:16:dd:01:ff:5b:32:8a:05:f9:ef:1b:0c:e7:0c:eb:34:03: 68:fd:d1:e6:2f:79:39:66:a6:be:60:1f:3d:d8:97:01:42:d2: 73:49:ff:ec:d8:aa:f8:5c:a3:12:e2:8b:95:09:bb:e0:20:1c: 79:23:53:1e:8c:7a:ee:23:bd:43:73:65:3b:70:be:8b:aa:57: 17:b4:fd:0c:95:6e:77:64:3c:22:20:e5:d3:55:58:b0:6b:c7: bb:17:8c:ea:07:7d:2b:a9:23:0b:64:9a:15:ee:cd:2a:9c:b0: 6f:cb:25:df:f2:05:79:45:8d:fc:50:e3:04:6f:55:34:a0:26: 29:fb:1e:bc:82:32:9e:00:31:f4:76:72:3f:bc:ba:c6:9e:4f: 33:e4:78:9a:67:10:66:64:b0:37:b6:09:b9:79:6b:c2:62:b4: 00:cf:6c:76 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMQpAQFUMI6GdENTfH1UrzEM4AU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ5RDREQkNGQUE1RUUyOEE3OUJGNDlFNjIzRTg3Q0Qy MzMyNEU0QjAeFw0yNjA1MTExNjQwNDZaFw0yNzA1MTAxNjQ1NDZaMDMxMTAvBgNV BAMTKDFCNTc2MDcwMTlFRjQ1N0EwREIxQURDRkJDMzEzNDkzNjQxRkUwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOJWNM48e3Dd/SxEaufrSZpX+p fSasALIOXMslueYF42gzURNd80+lj00YfQpT6mFYb9Flvglla9gYRWdQsPi3yxzd 1n7Lo6ac0Do7fv0gMX9+aeCJbkrDqXWHMCLJAad+i0WXyw1M18LCidIrT67wvGvQ da635PhHzdWpVOmyCD4dnLozDxoMTfvLN0WtRZKPEvqTjZz3OIsJA3Hn+xQFhcRB DLSb2NSl/wfy5l3vvyrFBfZb7n8uaGLTi82bogV09HBegpp1oC2R3Dt8kSWeBU7k wd1UqE91GFEgdOJJvvsLTwfBkRhVljCmtfy23H2oXz/bVv0ug82G8fxdP6pnAgMB AAGjggHcMIIB2DAdBgNVHQ4EFgQUG1dgcBnvRXoNsa3PvDE0k2Qf4DYwHwYDVR0j BBgwFoAUBJ1NvPql7iinm/SeYj6HzSMyTkswDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0UtSU5H LzAvMDQ5RDREQkNGQUE1RUUyOEE3OUJGNDlFNjIzRTg3Q0QyMzMyNEU0Qi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8wNDlENERCQ0ZBQTVFRTI4QTc5QkY0OUU2MjNF ODdDRDIzMzI0RTRCLmNlcjB2BggrBgEFBQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0UtSU5HLzAvMzEzMTM5MmUzMTM0 MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDM5MzQzMTM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dw4wDQYJKoZIhvcNAQELBQADggEBAHFY98713TEXU6JhmNBnxNLWnodl2wvGG9qT botfVgrH5aUdGZqnzbxpYsKJJpF2u3UpDIufIz+9f1XUtG2e0LDFZ7ERgN4KuHdi 6NQxdQLWoYi4S0cnua8l9DcW3QH/WzKKBfnvGwznDOs0A2j90eYveTlmpr5gHz3Y lwFC0nNJ/+zYqvhcoxLii5UJu+AgHHkjUx6Meu4jvUNzZTtwvouqVxe0/QyVbndk PCIg5dNVWLBrx7sXjOoHfSupIwtkmhXuzSqcsG/LJd/yBXlFjfxQ4wRvVTSgJin7 HryCMp4AMfR2cj+8usaeTzPkeJpnEGZksDe2Cbl5a8JitADPbHY= -----END CERTIFICATE-----Generated at Wed May 13 21:51:33 2026 by rpki-client